@webiny/api-core 0.0.0-unstable.61c048f412

package/features/security/roles/UpdateRole/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const UpdateRoleUseCase = createAbstraction("UpdateRoleUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/roles/UpdateRole/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","UpdateRoleUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Role, UpdateRoleInput as UpdateRoleUseCaseInput } from \"../shared/types.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport {\n    NotAuthorizedError,\n    CannotUpdatePluginRolesError,\n    RoleValidationError\n} from \"../shared/errors.js\";\n\nexport interface IUpdateRoleUseCaseErrors {\n    notAuthorized: NotAuthorizedError;\n    cannotUpdatePlugin: CannotUpdatePluginRolesError;\n    validation: RoleValidationError;\n}\n\ntype UpdateRoleUseCaseError =\n    | IUpdateRoleUseCaseErrors[keyof IUpdateRoleUseCaseErrors]\n    | RolesRepository.Error;\n\nexport interface IUpdateRoleUseCase {\n    execute(\n        id: string,\n        input: UpdateRoleUseCaseInput\n    ): Promise<Result<Role, UpdateRoleUseCaseError>>;\n}\n\nexport const UpdateRoleUseCase = createAbstraction<IUpdateRoleUseCase>(\"UpdateRoleUseCase\");\n\nexport namespace UpdateRoleUseCase {\n    export type Interface = IUpdateRoleUseCase;\n    export type Error = UpdateRoleUseCaseError;\n}\n\nexport interface RoleBeforeUpdatePayload {\n    original: Role;\n    updated: Role;\n    input: UpdateRoleUseCaseInput;\n}\n\nexport interface RoleAfterUpdatePayload {\n    original: Role;\n    updated: Role;\n    input: UpdateRoleUseCaseInput;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA2BvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAqB,mBAAmB,CAAC","ignoreList":[]}

package/features/security/roles/UpdateRole/events.d.ts

@@ -0,0 +1,21 @@
+import { DomainEvent } from "../../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../../features/eventPublisher/index.js";
+import type { RoleBeforeUpdatePayload, RoleAfterUpdatePayload } from "./abstractions.js";
+export declare class RoleBeforeUpdateEvent extends DomainEvent<RoleBeforeUpdatePayload> {
+    eventType: "role.beforeUpdate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleBeforeUpdateEvent>>;
+}
+export declare const RoleBeforeUpdateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleBeforeUpdateEvent>>;
+export declare namespace RoleBeforeUpdateHandler {
+    type Interface = IEventHandler<RoleBeforeUpdateEvent>;
+    type Event = RoleBeforeUpdateEvent;
+}
+export declare class RoleAfterUpdateEvent extends DomainEvent<RoleAfterUpdatePayload> {
+    eventType: "role.afterUpdate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleAfterUpdateEvent>>;
+}
+export declare const RoleAfterUpdateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleAfterUpdateEvent>>;
+export declare namespace RoleAfterUpdateHandler {
+    type Interface = IEventHandler<RoleAfterUpdateEvent>;
+    type Event = RoleAfterUpdateEvent;
+}

package/features/security/roles/UpdateRole/events.js

@@ -0,0 +1,18 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../../eventPublisher/index.js";
+export class RoleBeforeUpdateEvent extends DomainEvent {
+  eventType = "role.beforeUpdate";
+  getHandlerAbstraction() {
+    return RoleBeforeUpdateHandler;
+  }
+}
+export const RoleBeforeUpdateHandler = createAbstraction("RoleBeforeUpdateHandler");
+export class RoleAfterUpdateEvent extends DomainEvent {
+  eventType = "role.afterUpdate";
+  getHandlerAbstraction() {
+    return RoleAfterUpdateHandler;
+  }
+}
+export const RoleAfterUpdateHandler = createAbstraction("RoleAfterUpdateHandler");
+
+//# sourceMappingURL=events.js.map

package/features/security/roles/UpdateRole/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DomainEvent","RoleBeforeUpdateEvent","eventType","getHandlerAbstraction","RoleBeforeUpdateHandler","RoleAfterUpdateEvent","RoleAfterUpdateHandler"],"sources":["events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { RoleBeforeUpdatePayload, RoleAfterUpdatePayload } from \"./abstractions.js\";\n\nexport class RoleBeforeUpdateEvent extends DomainEvent<RoleBeforeUpdatePayload> {\n    eventType = \"role.beforeUpdate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleBeforeUpdateHandler;\n    }\n}\n\nexport const RoleBeforeUpdateHandler =\n    createAbstraction<IEventHandler<RoleBeforeUpdateEvent>>(\"RoleBeforeUpdateHandler\");\n\nexport namespace RoleBeforeUpdateHandler {\n    export type Interface = IEventHandler<RoleBeforeUpdateEvent>;\n    export type Event = RoleBeforeUpdateEvent;\n}\n\nexport class RoleAfterUpdateEvent extends DomainEvent<RoleAfterUpdatePayload> {\n    eventType = \"role.afterUpdate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleAfterUpdateHandler;\n    }\n}\n\nexport const RoleAfterUpdateHandler =\n    createAbstraction<IEventHandler<RoleAfterUpdateEvent>>(\"RoleAfterUpdateHandler\");\n\nexport namespace RoleAfterUpdateHandler {\n    export type Interface = IEventHandler<RoleAfterUpdateEvent>;\n    export type Event = RoleAfterUpdateEvent;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,WAAW;AAIpB,OAAO,MAAMC,qBAAqB,SAASD,WAAW,CAA0B;EAC5EE,SAAS,GAAG,mBAAmB;EAE/BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,uBAAuB;EAClC;AACJ;AAEA,OAAO,MAAMA,uBAAuB,GAChCL,iBAAiB,CAAuC,yBAAyB,CAAC;AAOtF,OAAO,MAAMM,oBAAoB,SAASL,WAAW,CAAyB;EAC1EE,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAMA,sBAAsB,GAC/BP,iBAAiB,CAAsC,wBAAwB,CAAC","ignoreList":[]}

package/features/security/roles/UpdateRole/feature.d.ts

@@ -0,0 +1 @@
+export declare const UpdateRoleFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/roles/UpdateRole/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { UpdateRoleUseCase } from "./UpdateRoleUseCase.js";
+export const UpdateRoleFeature = createFeature({
+  name: "UpdateRole",
+  register(container) {
+    container.register(UpdateRoleUseCase);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/roles/UpdateRole/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","UpdateRoleUseCase","UpdateRoleFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { UpdateRoleUseCase } from \"./UpdateRoleUseCase.js\";\n\nexport const UpdateRoleFeature = createFeature({\n    name: \"UpdateRole\",\n    register(container) {\n        container.register(UpdateRoleUseCase);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,iBAAiB,GAAGF,aAAa,CAAC;EAC3CG,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,iBAAiB,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/UpdateRole/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/security/roles/UpdateRole/index.js

@@ -0,0 +1,4 @@
+export * from "./abstractions.js";
+export * from "./events.js";
+
+//# sourceMappingURL=index.js.map

package/features/security/roles/UpdateRole/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\nexport * from \"./events.js\";\n"],"mappings":"AAAA;AACA","ignoreList":[]}

package/features/security/roles/UpdateRole/schema.d.ts

@@ -0,0 +1,24 @@
+import { z } from "zod";
+export declare const updateRoleValidation: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    permissions?: z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+    name?: string | undefined;
+    description?: string | undefined;
+}, {
+    permissions?: z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+    name?: string | undefined;
+    description?: string | undefined;
+}>;

package/features/security/roles/UpdateRole/schema.js

@@ -0,0 +1,10 @@
+import { z } from "zod";
+export const updateRoleValidation = z.object({
+  name: z.string().min(3).optional(),
+  description: z.string().max(500).optional(),
+  permissions: z.array(z.object({
+    name: z.string()
+  }).passthrough()).optional()
+});
+
+//# sourceMappingURL=schema.js.map

package/features/security/roles/UpdateRole/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","updateRoleValidation","object","name","string","min","optional","description","max","permissions","array","passthrough"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateRoleValidation = z.object({\n    name: z.string().min(3).optional(),\n    description: z.string().max(500).optional(),\n    permissions: z.array(z.object({ name: z.string() }).passthrough()).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,oBAAoB,GAAGD,CAAC,CAACE,MAAM,CAAC;EACzCC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAClCC,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACI,GAAG,CAAC,GAAG,CAAC,CAACF,QAAQ,CAAC,CAAC;EAC3CG,WAAW,EAAET,CAAC,CAACU,KAAK,CAACV,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACO,WAAW,CAAC,CAAC,CAAC,CAACL,QAAQ,CAAC;AAChF,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/feature.d.ts

@@ -0,0 +1 @@
+export declare const RolesFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/roles/feature.js

@@ -0,0 +1,29 @@
+import { createFeature } from "@webiny/feature/api";
+import { RolesRepository } from "./shared/RolesRepository.js";
+import { RolesRepositoryCachingDecorator } from "./shared/decorators/RolesRepositoryCachingDecorator.js";
+import { GetRoleFeature } from "./GetRole/feature.js";
+import { ListRolesFeature } from "./ListRoles/feature.js";
+import { CreateRoleFeature } from "./CreateRole/feature.js";
+import { UpdateRoleFeature } from "./UpdateRole/feature.js";
+import { DeleteRoleFeature } from "./DeleteRole/feature.js";
+import { RoleInstaller } from "./Installer/RolesInstaller.js";
+export const RolesFeature = createFeature({
+  name: "Roles",
+  register(container) {
+    // Register repository in singleton scope
+    container.register(RolesRepository).inSingletonScope();
+
+    // Register caching decorator
+    container.registerDecorator(RolesRepositoryCachingDecorator);
+
+    // Register all use cases
+    GetRoleFeature.register(container);
+    ListRolesFeature.register(container);
+    CreateRoleFeature.register(container);
+    UpdateRoleFeature.register(container);
+    DeleteRoleFeature.register(container);
+    container.register(RoleInstaller);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/roles/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","RolesRepository","RolesRepositoryCachingDecorator","GetRoleFeature","ListRolesFeature","CreateRoleFeature","UpdateRoleFeature","DeleteRoleFeature","RoleInstaller","RolesFeature","name","register","container","inSingletonScope","registerDecorator"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { RolesRepository } from \"./shared/RolesRepository.js\";\nimport { RolesRepositoryCachingDecorator } from \"./shared/decorators/RolesRepositoryCachingDecorator.js\";\nimport { GetRoleFeature } from \"./GetRole/feature.js\";\nimport { ListRolesFeature } from \"./ListRoles/feature.js\";\nimport { CreateRoleFeature } from \"./CreateRole/feature.js\";\nimport { UpdateRoleFeature } from \"./UpdateRole/feature.js\";\nimport { DeleteRoleFeature } from \"./DeleteRole/feature.js\";\nimport { RoleInstaller } from \"~/features/security/roles/Installer/RolesInstaller.js\";\n\nexport const RolesFeature = createFeature({\n    name: \"Roles\",\n    register(container) {\n        // Register repository in singleton scope\n        container.register(RolesRepository).inSingletonScope();\n\n        // Register caching decorator\n        container.registerDecorator(RolesRepositoryCachingDecorator);\n\n        // Register all use cases\n        GetRoleFeature.register(container);\n        ListRolesFeature.register(container);\n        CreateRoleFeature.register(container);\n        UpdateRoleFeature.register(container);\n        DeleteRoleFeature.register(container);\n\n        container.register(RoleInstaller);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,eAAe;AACxB,SAASC,+BAA+B;AACxC,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,aAAa;AAEtB,OAAO,MAAMC,YAAY,GAAGT,aAAa,CAAC;EACtCU,IAAI,EAAE,OAAO;EACbC,QAAQA,CAACC,SAAS,EAAE;IAChB;IACAA,SAAS,CAACD,QAAQ,CAACV,eAAe,CAAC,CAACY,gBAAgB,CAAC,CAAC;;IAEtD;IACAD,SAAS,CAACE,iBAAiB,CAACZ,+BAA+B,CAAC;;IAE5D;IACAC,cAAc,CAACQ,QAAQ,CAACC,SAAS,CAAC;IAClCR,gBAAgB,CAACO,QAAQ,CAACC,SAAS,CAAC;IACpCP,iBAAiB,CAACM,QAAQ,CAACC,SAAS,CAAC;IACrCN,iBAAiB,CAACK,QAAQ,CAACC,SAAS,CAAC;IACrCL,iBAAiB,CAACI,QAAQ,CAACC,SAAS,CAAC;IAErCA,SAAS,CAACD,QAAQ,CAACH,aAAa,CAAC;EACrC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/shared/RolesRepository.d.ts

@@ -0,0 +1,18 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { RolesRepository as RepositoryAbstraction } from "./abstractions.js";
+import type { Role, GetRoleInput, ListRolesInput } from "./types.js";
+import { SecurityStorageOperations, RolesProvider } from "../../../../features/security/shared/abstractions.js";
+declare class RolesRepositoryImpl implements RepositoryAbstraction.Interface {
+    private tenantContext;
+    private storageOperations;
+    private rolesProvider;
+    constructor(tenantContext: TenantContext.Interface, storageOperations: SecurityStorageOperations.Interface, rolesProvider: RolesProvider.Interface);
+    get(params: GetRoleInput): Promise<Result<Role, RepositoryAbstraction.Error>>;
+    list(params: ListRolesInput): Promise<Result<Role[], RepositoryAbstraction.Error>>;
+    create(role: Role): Promise<Result<void, RepositoryAbstraction.Error>>;
+    update(role: Role): Promise<Result<void, RepositoryAbstraction.Error>>;
+    delete(role: Role): Promise<Result<void, RepositoryAbstraction.Error>>;
+}
+export declare const RolesRepository: import("@webiny/di").Implementation<typeof RolesRepositoryImpl>;
+export {};

package/features/security/roles/shared/RolesRepository.js

@@ -0,0 +1,130 @@
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { RolesRepository as RepositoryAbstraction } from "./abstractions.js";
+import { SecurityStorageOperations, RolesProvider } from "../../shared/abstractions.js";
+import { RoleNotFoundError, RoleStorageError } from "./errors.js";
+class RolesRepositoryImpl {
+  constructor(tenantContext, storageOperations, rolesProvider) {
+    this.tenantContext = tenantContext;
+    this.storageOperations = storageOperations;
+    this.rolesProvider = rolesProvider;
+  }
+  async get(params) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+
+      // First check plugin roles
+      const pluginRoles = await this.rolesProvider();
+      const pluginRole = pluginRoles.find(r => {
+        // Match by ID or slug
+        if (params.id && r.id === params.id) {
+          return true;
+        }
+        if (params.slug && r.slug === params.slug) {
+          return true;
+        }
+        return false;
+      });
+
+      // Filter by tenant if role has one
+      if (pluginRole) {
+        if (!pluginRole.tenant || pluginRole.tenant === tenant.id) {
+          return Result.ok(pluginRole);
+        }
+      }
+
+      // Then check storage
+      const role = await this.storageOperations.getRole({
+        where: {
+          ...params,
+          tenant: tenant.id
+        }
+      });
+      if (role) {
+        return Result.ok(role);
+      }
+      return Result.fail(new RoleNotFoundError());
+    } catch (error) {
+      return Result.fail(new RoleStorageError(error));
+    }
+  }
+  async list(params) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+
+      // Get roles from storage
+      const rolesFromDatabase = await this.storageOperations.listRoles({
+        where: {
+          tenant: tenant.id,
+          ...params.where
+        },
+        sort: params.sort || ["createdOn_ASC"]
+      });
+
+      // Get roles from plugins
+      const pluginRoles = await this.rolesProvider();
+      const rolesFromPlugins = pluginRoles.filter(role => {
+        // Filter by tenant - plugin roles with no tenant or matching tenant
+        if (role.tenant && role.tenant !== tenant.id) {
+          return false;
+        }
+
+        // Apply where filters if provided
+        const {
+          id_in,
+          slug_in
+        } = params.where || {};
+        if (id_in && !id_in.includes(role.id)) {
+          return false;
+        }
+        if (slug_in && !slug_in.includes(role.slug)) {
+          return false;
+        }
+        return true;
+      });
+
+      // Plugin roles come first (they don't have createdOn), then database roles
+      return Result.ok([...rolesFromPlugins, ...rolesFromDatabase]);
+    } catch (error) {
+      return Result.fail(new RoleStorageError(error));
+    }
+  }
+  async create(role) {
+    try {
+      await this.storageOperations.createRole({
+        role
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new RoleStorageError(error));
+    }
+  }
+  async update(role) {
+    try {
+      await this.storageOperations.updateRole({
+        role
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new RoleStorageError(error));
+    }
+  }
+  async delete(role) {
+    try {
+      await this.storageOperations.deleteRole({
+        role
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new RoleStorageError(error));
+    }
+  }
+}
+export const RolesRepository = createImplementation({
+  abstraction: RepositoryAbstraction,
+  implementation: RolesRepositoryImpl,
+  dependencies: [TenantContext, SecurityStorageOperations, RolesProvider]
+});
+
+//# sourceMappingURL=RolesRepository.js.map

package/features/security/roles/shared/RolesRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","Result","TenantContext","RolesRepository","RepositoryAbstraction","SecurityStorageOperations","RolesProvider","RoleNotFoundError","RoleStorageError","RolesRepositoryImpl","constructor","tenantContext","storageOperations","rolesProvider","get","params","tenant","getTenant","pluginRoles","pluginRole","find","r","id","slug","ok","role","getRole","where","fail","error","list","rolesFromDatabase","listRoles","sort","rolesFromPlugins","filter","id_in","slug_in","includes","create","createRole","update","updateRole","delete","deleteRole","abstraction","implementation","dependencies"],"sources":["RolesRepository.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { RolesRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport type { Role, GetRoleInput, ListRolesInput } from \"./types.js\";\nimport {\n    SecurityStorageOperations,\n    RolesProvider\n} from \"~/features/security/shared/abstractions.js\";\nimport { RoleNotFoundError, RoleStorageError } from \"./errors.js\";\n\nclass RolesRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private storageOperations: SecurityStorageOperations.Interface,\n        private rolesProvider: RolesProvider.Interface\n    ) {}\n\n    async get(params: GetRoleInput): Promise<Result<Role, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // First check plugin roles\n            const pluginRoles = await this.rolesProvider();\n            const pluginRole = pluginRoles.find(r => {\n                // Match by ID or slug\n                if (params.id && r.id === params.id) {\n                    return true;\n                }\n\n                if (params.slug && r.slug === params.slug) {\n                    return true;\n                }\n\n                return false;\n            });\n\n            // Filter by tenant if role has one\n            if (pluginRole) {\n                if (!pluginRole.tenant || pluginRole.tenant === tenant.id) {\n                    return Result.ok(pluginRole);\n                }\n            }\n\n            // Then check storage\n            const role = await this.storageOperations.getRole({\n                where: {\n                    ...params,\n                    tenant: tenant.id\n                }\n            });\n\n            if (role) {\n                return Result.ok(role);\n            }\n\n            return Result.fail(new RoleNotFoundError());\n        } catch (error) {\n            return Result.fail(new RoleStorageError(error));\n        }\n    }\n\n    async list(params: ListRolesInput): Promise<Result<Role[], RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // Get roles from storage\n            const rolesFromDatabase = await this.storageOperations.listRoles({\n                where: {\n                    tenant: tenant.id,\n                    ...params.where\n                },\n                sort: params.sort || [\"createdOn_ASC\"]\n            });\n\n            // Get roles from plugins\n            const pluginRoles = await this.rolesProvider();\n            const rolesFromPlugins = pluginRoles.filter(role => {\n                // Filter by tenant - plugin roles with no tenant or matching tenant\n                if (role.tenant && role.tenant !== tenant.id) {\n                    return false;\n                }\n\n                // Apply where filters if provided\n                const { id_in, slug_in } = params.where || {};\n                if (id_in && !id_in.includes(role.id)) {\n                    return false;\n                }\n                if (slug_in && !slug_in.includes(role.slug)) {\n                    return false;\n                }\n\n                return true;\n            });\n\n            // Plugin roles come first (they don't have createdOn), then database roles\n            return Result.ok([...rolesFromPlugins, ...rolesFromDatabase]);\n        } catch (error) {\n            return Result.fail(new RoleStorageError(error));\n        }\n    }\n\n    async create(role: Role): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            await this.storageOperations.createRole({ role });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new RoleStorageError(error));\n        }\n    }\n\n    async update(role: Role): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            await this.storageOperations.updateRole({ role });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new RoleStorageError(error));\n        }\n    }\n\n    async delete(role: Role): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            await this.storageOperations.deleteRole({ role });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new RoleStorageError(error));\n        }\n    }\n}\n\nexport const RolesRepository = createImplementation({\n    abstraction: RepositoryAbstraction,\n    implementation: RolesRepositoryImpl,\n    dependencies: [TenantContext, SecurityStorageOperations, RolesProvider]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,aAAa;AACtB,SAASC,eAAe,IAAIC,qBAAqB;AAEjD,SACIC,yBAAyB,EACzBC,aAAa;AAEjB,SAASC,iBAAiB,EAAEC,gBAAgB;AAE5C,MAAMC,mBAAmB,CAA4C;EACjEC,WAAWA,CACCC,aAAsC,EACtCC,iBAAsD,EACtDC,aAAsC,EAChD;IAAA,KAHUF,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,iBAAsD,GAAtDA,iBAAsD;IAAA,KACtDC,aAAsC,GAAtCA,aAAsC;EAC/C;EAEH,MAAMC,GAAGA,CAACC,MAAoB,EAAsD;IAChF,IAAI;MACA,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;;MAE7C;MACA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACL,aAAa,CAAC,CAAC;MAC9C,MAAMM,UAAU,GAAGD,WAAW,CAACE,IAAI,CAACC,CAAC,IAAI;QACrC;QACA,IAAIN,MAAM,CAACO,EAAE,IAAID,CAAC,CAACC,EAAE,KAAKP,MAAM,CAACO,EAAE,EAAE;UACjC,OAAO,IAAI;QACf;QAEA,IAAIP,MAAM,CAACQ,IAAI,IAAIF,CAAC,CAACE,IAAI,KAAKR,MAAM,CAACQ,IAAI,EAAE;UACvC,OAAO,IAAI;QACf;QAEA,OAAO,KAAK;MAChB,CAAC,CAAC;;MAEF;MACA,IAAIJ,UAAU,EAAE;QACZ,IAAI,CAACA,UAAU,CAACH,MAAM,IAAIG,UAAU,CAACH,MAAM,KAAKA,MAAM,CAACM,EAAE,EAAE;UACvD,OAAOrB,MAAM,CAACuB,EAAE,CAACL,UAAU,CAAC;QAChC;MACJ;;MAEA;MACA,MAAMM,IAAI,GAAG,MAAM,IAAI,CAACb,iBAAiB,CAACc,OAAO,CAAC;QAC9CC,KAAK,EAAE;UACH,GAAGZ,MAAM;UACTC,MAAM,EAAEA,MAAM,CAACM;QACnB;MACJ,CAAC,CAAC;MAEF,IAAIG,IAAI,EAAE;QACN,OAAOxB,MAAM,CAACuB,EAAE,CAACC,IAAI,CAAC;MAC1B;MAEA,OAAOxB,MAAM,CAAC2B,IAAI,CAAC,IAAIrB,iBAAiB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,OAAOsB,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMC,IAAIA,CAACf,MAAsB,EAAwD;IACrF,IAAI;MACA,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;;MAE7C;MACA,MAAMc,iBAAiB,GAAG,MAAM,IAAI,CAACnB,iBAAiB,CAACoB,SAAS,CAAC;QAC7DL,KAAK,EAAE;UACHX,MAAM,EAAEA,MAAM,CAACM,EAAE;UACjB,GAAGP,MAAM,CAACY;QACd,CAAC;QACDM,IAAI,EAAElB,MAAM,CAACkB,IAAI,IAAI,CAAC,eAAe;MACzC,CAAC,CAAC;;MAEF;MACA,MAAMf,WAAW,GAAG,MAAM,IAAI,CAACL,aAAa,CAAC,CAAC;MAC9C,MAAMqB,gBAAgB,GAAGhB,WAAW,CAACiB,MAAM,CAACV,IAAI,IAAI;QAChD;QACA,IAAIA,IAAI,CAACT,MAAM,IAAIS,IAAI,CAACT,MAAM,KAAKA,MAAM,CAACM,EAAE,EAAE;UAC1C,OAAO,KAAK;QAChB;;QAEA;QACA,MAAM;UAAEc,KAAK;UAAEC;QAAQ,CAAC,GAAGtB,MAAM,CAACY,KAAK,IAAI,CAAC,CAAC;QAC7C,IAAIS,KAAK,IAAI,CAACA,KAAK,CAACE,QAAQ,CAACb,IAAI,CAACH,EAAE,CAAC,EAAE;UACnC,OAAO,KAAK;QAChB;QACA,IAAIe,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,CAACb,IAAI,CAACF,IAAI,CAAC,EAAE;UACzC,OAAO,KAAK;QAChB;QAEA,OAAO,IAAI;MACf,CAAC,CAAC;;MAEF;MACA,OAAOtB,MAAM,CAACuB,EAAE,CAAC,CAAC,GAAGU,gBAAgB,EAAE,GAAGH,iBAAiB,CAAC,CAAC;IACjE,CAAC,CAAC,OAAOF,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMU,MAAMA,CAACd,IAAU,EAAsD;IACzE,IAAI;MACA,MAAM,IAAI,CAACb,iBAAiB,CAAC4B,UAAU,CAAC;QAAEf;MAAK,CAAC,CAAC;MACjD,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMY,MAAMA,CAAChB,IAAU,EAAsD;IACzE,IAAI;MACA,MAAM,IAAI,CAACb,iBAAiB,CAAC8B,UAAU,CAAC;QAAEjB;MAAK,CAAC,CAAC;MACjD,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMc,MAAMA,CAAClB,IAAU,EAAsD;IACzE,IAAI;MACA,MAAM,IAAI,CAACb,iBAAiB,CAACgC,UAAU,CAAC;QAAEnB;MAAK,CAAC,CAAC;MACjD,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;AACJ;AAEA,OAAO,MAAM1B,eAAe,GAAGH,oBAAoB,CAAC;EAChD6C,WAAW,EAAEzC,qBAAqB;EAClC0C,cAAc,EAAErC,mBAAmB;EACnCsC,YAAY,EAAE,CAAC7C,aAAa,EAAEG,yBAAyB,EAAEC,aAAa;AAC1E,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/shared/abstractions.d.ts

@@ -0,0 +1,20 @@
+import { Result } from "@webiny/feature/api";
+import type { Role, GetRoleInput, ListRolesInput } from "./types.js";
+import { RoleNotFoundError, RoleStorageError } from "./errors.js";
+export interface IRolesRepositoryErrors {
+    base: RoleNotFoundError | RoleStorageError;
+}
+type RepositoryError = IRolesRepositoryErrors[keyof IRolesRepositoryErrors];
+export interface IRolesRepository {
+    get(params: GetRoleInput): Promise<Result<Role, RepositoryError>>;
+    list(params: ListRolesInput): Promise<Result<Role[], RepositoryError>>;
+    create(data: Role): Promise<Result<void, RepositoryError>>;
+    update(data: Role): Promise<Result<void, RepositoryError>>;
+    delete(role: Role): Promise<Result<void, RepositoryError>>;
+}
+export declare const RolesRepository: import("@webiny/di").Abstraction<IRolesRepository>;
+export declare namespace RolesRepository {
+    type Interface = IRolesRepository;
+    type Error = RepositoryError;
+}
+export {};

package/features/security/roles/shared/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const RolesRepository = createAbstraction("RolesRepository");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/roles/shared/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","RolesRepository"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Role, GetRoleInput, ListRolesInput } from \"./types.js\";\nimport { RoleNotFoundError, RoleStorageError } from \"./errors.js\";\n\nexport interface IRolesRepositoryErrors {\n    base: RoleNotFoundError | RoleStorageError;\n}\n\ntype RepositoryError = IRolesRepositoryErrors[keyof IRolesRepositoryErrors];\n\nexport interface IRolesRepository {\n    get(params: GetRoleInput): Promise<Result<Role, RepositoryError>>;\n    list(params: ListRolesInput): Promise<Result<Role[], RepositoryError>>;\n    create(data: Role): Promise<Result<void, RepositoryError>>;\n    update(data: Role): Promise<Result<void, RepositoryError>>;\n    delete(role: Role): Promise<Result<void, RepositoryError>>;\n}\n\nexport const RolesRepository = createAbstraction<IRolesRepository>(\"RolesRepository\");\n\nexport namespace RolesRepository {\n    export type Interface = IRolesRepository;\n    export type Error = RepositoryError;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAmBvD,OAAO,MAAMC,eAAe,GAAGD,iBAAiB,CAAmB,iBAAiB,CAAC","ignoreList":[]}

package/features/security/roles/shared/decorators/ListCache.d.ts

@@ -0,0 +1,24 @@
+export type Constructor<T> = new (...args: any[]) => T;
+export interface IListCachePredicate<T> {
+    (item: T): boolean;
+}
+export interface IListCacheItemUpdater<T> {
+    (item: T): T;
+}
+export interface IListCache<T> {
+    clear(): void;
+    hasItems(): boolean;
+    getItems(): T[];
+    addItems(items: T[]): void;
+    updateItems(updater: IListCacheItemUpdater<T>): void;
+}
+export declare class ListCache<T> implements IListCache<T> {
+    private state;
+    constructor();
+    clear(): void;
+    hasItems(): boolean;
+    getItems(): T[];
+    addItems(items: T[]): void;
+    updateItems(updater: IListCacheItemUpdater<T>): void;
+    removeItems(predicate: IListCachePredicate<T>): void;
+}

package/features/security/roles/shared/decorators/ListCache.js

@@ -0,0 +1,26 @@
+import cloneDeep from "lodash/cloneDeep.js";
+export class ListCache {
+  constructor() {
+    this.state = [];
+  }
+  clear() {
+    this.state = [];
+  }
+  hasItems() {
+    return this.state.length > 0;
+  }
+  getItems() {
+    return cloneDeep(this.state);
+  }
+  addItems(items) {
+    this.state.push(...items);
+  }
+  updateItems(updater) {
+    this.state = this.state.map(item => updater(item));
+  }
+  removeItems(predicate) {
+    this.state = this.state.filter(item => !predicate(item));
+  }
+}
+
+//# sourceMappingURL=ListCache.js.map

package/features/security/roles/shared/decorators/ListCache.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["cloneDeep","ListCache","constructor","state","clear","hasItems","length","getItems","addItems","items","push","updateItems","updater","map","item","removeItems","predicate","filter"],"sources":["ListCache.ts"],"sourcesContent":["import cloneDeep from \"lodash/cloneDeep.js\";\n\nexport type Constructor<T> = new (...args: any[]) => T;\n\nexport interface IListCachePredicate<T> {\n    (item: T): boolean;\n}\n\nexport interface IListCacheItemUpdater<T> {\n    (item: T): T;\n}\n\nexport interface IListCache<T> {\n    clear(): void;\n    hasItems(): boolean;\n    getItems(): T[];\n    addItems(items: T[]): void;\n    updateItems(updater: IListCacheItemUpdater<T>): void;\n}\n\nexport class ListCache<T> implements IListCache<T> {\n    private state: T[];\n\n    constructor() {\n        this.state = [];\n    }\n\n    clear(): void {\n        this.state = [];\n    }\n\n    hasItems(): boolean {\n        return this.state.length > 0;\n    }\n\n    getItems(): T[] {\n        return cloneDeep(this.state);\n    }\n\n    addItems(items: T[]): void {\n        this.state.push(...items);\n    }\n\n    updateItems(updater: IListCacheItemUpdater<T>): void {\n        this.state = this.state.map(item => updater(item));\n    }\n\n    removeItems(predicate: IListCachePredicate<T>) {\n        this.state = this.state.filter(item => !predicate(item));\n    }\n}\n"],"mappings":"AAAA,OAAOA,SAAS,MAAM,qBAAqB;AAoB3C,OAAO,MAAMC,SAAS,CAA6B;EAG/CC,WAAWA,CAAA,EAAG;IACV,IAAI,CAACC,KAAK,GAAG,EAAE;EACnB;EAEAC,KAAKA,CAAA,EAAS;IACV,IAAI,CAACD,KAAK,GAAG,EAAE;EACnB;EAEAE,QAAQA,CAAA,EAAY;IAChB,OAAO,IAAI,CAACF,KAAK,CAACG,MAAM,GAAG,CAAC;EAChC;EAEAC,QAAQA,CAAA,EAAQ;IACZ,OAAOP,SAAS,CAAC,IAAI,CAACG,KAAK,CAAC;EAChC;EAEAK,QAAQA,CAACC,KAAU,EAAQ;IACvB,IAAI,CAACN,KAAK,CAACO,IAAI,CAAC,GAAGD,KAAK,CAAC;EAC7B;EAEAE,WAAWA,CAACC,OAAiC,EAAQ;IACjD,IAAI,CAACT,KAAK,GAAG,IAAI,CAACA,KAAK,CAACU,GAAG,CAACC,IAAI,IAAIF,OAAO,CAACE,IAAI,CAAC,CAAC;EACtD;EAEAC,WAAWA,CAACC,SAAiC,EAAE;IAC3C,IAAI,CAACb,KAAK,GAAG,IAAI,CAACA,KAAK,CAACc,MAAM,CAACH,IAAI,IAAI,CAACE,SAAS,CAACF,IAAI,CAAC,CAAC;EAC5D;AACJ","ignoreList":[]}

package/features/security/roles/shared/decorators/RolesRepositoryCachingDecorator.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { RolesRepository } from "../abstractions.js";
+import type { Role, GetRoleInput, ListRolesInput } from "../types.js";
+declare class RolesRepositoryCachingDecoratorImpl implements RolesRepository.Interface {
+    private decoratee;
+    private readonly cache;
+    constructor(decoratee: RolesRepository.Interface);
+    get(params: GetRoleInput): Promise<Result<Role, RolesRepository.Error>>;
+    list(params: ListRolesInput): Promise<Result<Role[], RolesRepository.Error>>;
+    create(role: Role): Promise<Result<void, RolesRepository.Error>>;
+    update(role: Role): Promise<Result<void, RolesRepository.Error>>;
+    delete(role: Role): Promise<Result<void, RolesRepository.Error>>;
+}
+export declare const RolesRepositoryCachingDecorator: typeof RolesRepositoryCachingDecoratorImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("../abstractions.js").IRolesRepository>;
+};
+export {};

package/features/security/roles/shared/decorators/RolesRepositoryCachingDecorator.js

@@ -0,0 +1,76 @@
+import { Result } from "@webiny/feature/api";
+import { RolesRepository } from "../abstractions.js";
+import { ListCache } from "./ListCache.js";
+class RolesRepositoryCachingDecoratorImpl {
+  cache = new ListCache();
+  constructor(decoratee) {
+    this.decoratee = decoratee;
+  }
+  async get(params) {
+    // Check cache first
+    if (this.cache.hasItems()) {
+      const cachedRole = this.cache.getItems().find(r => {
+        if (params.id && r.id === params.id) {
+          return true;
+        }
+        if (params.slug && r.slug === params.slug) {
+          return true;
+        }
+        return false;
+      });
+      if (cachedRole) {
+        return Result.ok(cachedRole);
+      }
+    }
+
+    // Delegate to decoratee
+    const result = await this.decoratee.get(params);
+
+    // Add to cache on success
+    if (result.isOk()) {
+      this.cache.addItems([result.value]);
+    }
+    return result;
+  }
+  async list(params) {
+    return this.decoratee.list(params);
+  }
+  async create(role) {
+    const result = await this.decoratee.create(role);
+
+    // Add to cache on success
+    if (result.isOk()) {
+      this.cache.addItems([role]);
+    }
+    return result;
+  }
+  async update(role) {
+    const result = await this.decoratee.update(role);
+
+    // Update in cache on success
+    if (result.isOk()) {
+      this.cache.updateItems(item => {
+        if (item.id === role.id) {
+          return role;
+        }
+        return item;
+      });
+    }
+    return result;
+  }
+  async delete(role) {
+    const result = await this.decoratee.delete(role);
+
+    // Remove from cache on success
+    if (result.isOk()) {
+      this.cache.removeItems(item => item.id === role.id);
+    }
+    return result;
+  }
+}
+export const RolesRepositoryCachingDecorator = RolesRepository.createDecorator({
+  decorator: RolesRepositoryCachingDecoratorImpl,
+  dependencies: []
+});
+
+//# sourceMappingURL=RolesRepositoryCachingDecorator.js.map

package/features/security/roles/shared/decorators/RolesRepositoryCachingDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Result","RolesRepository","ListCache","RolesRepositoryCachingDecoratorImpl","cache","constructor","decoratee","get","params","hasItems","cachedRole","getItems","find","r","id","slug","ok","result","isOk","addItems","value","list","create","role","update","updateItems","item","delete","removeItems","RolesRepositoryCachingDecorator","createDecorator","decorator","dependencies"],"sources":["RolesRepositoryCachingDecorator.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { RolesRepository } from \"../abstractions.js\";\nimport type { Role, GetRoleInput, ListRolesInput } from \"../types.js\";\nimport { ListCache } from \"./ListCache.js\";\n\nclass RolesRepositoryCachingDecoratorImpl implements RolesRepository.Interface {\n    private readonly cache = new ListCache<Role>();\n\n    constructor(private decoratee: RolesRepository.Interface) {}\n\n    async get(params: GetRoleInput): Promise<Result<Role, RolesRepository.Error>> {\n        // Check cache first\n        if (this.cache.hasItems()) {\n            const cachedRole = this.cache.getItems().find(r => {\n                if (params.id && r.id === params.id) {\n                    return true;\n                }\n                if (params.slug && r.slug === params.slug) {\n                    return true;\n                }\n                return false;\n            });\n\n            if (cachedRole) {\n                return Result.ok(cachedRole);\n            }\n        }\n\n        // Delegate to decoratee\n        const result = await this.decoratee.get(params);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([result.value]);\n        }\n\n        return result;\n    }\n\n    async list(params: ListRolesInput): Promise<Result<Role[], RolesRepository.Error>> {\n        return this.decoratee.list(params);\n    }\n\n    async create(role: Role): Promise<Result<void, RolesRepository.Error>> {\n        const result = await this.decoratee.create(role);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([role]);\n        }\n\n        return result;\n    }\n\n    async update(role: Role): Promise<Result<void, RolesRepository.Error>> {\n        const result = await this.decoratee.update(role);\n\n        // Update in cache on success\n        if (result.isOk()) {\n            this.cache.updateItems(item => {\n                if (item.id === role.id) {\n                    return role;\n                }\n                return item;\n            });\n        }\n\n        return result;\n    }\n\n    async delete(role: Role): Promise<Result<void, RolesRepository.Error>> {\n        const result = await this.decoratee.delete(role);\n\n        // Remove from cache on success\n        if (result.isOk()) {\n            this.cache.removeItems(item => item.id === role.id);\n        }\n\n        return result;\n    }\n}\n\nexport const RolesRepositoryCachingDecorator = RolesRepository.createDecorator({\n    decorator: RolesRepositoryCachingDecoratorImpl,\n    dependencies: []\n});\n"],"mappings":"AAAA,SAASA,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,eAAe;AAExB,SAASC,SAAS;AAElB,MAAMC,mCAAmC,CAAsC;EAC1DC,KAAK,GAAG,IAAIF,SAAS,CAAO,CAAC;EAE9CG,WAAWA,CAASC,SAAoC,EAAE;IAAA,KAAtCA,SAAoC,GAApCA,SAAoC;EAAG;EAE3D,MAAMC,GAAGA,CAACC,MAAoB,EAAgD;IAC1E;IACA,IAAI,IAAI,CAACJ,KAAK,CAACK,QAAQ,CAAC,CAAC,EAAE;MACvB,MAAMC,UAAU,GAAG,IAAI,CAACN,KAAK,CAACO,QAAQ,CAAC,CAAC,CAACC,IAAI,CAACC,CAAC,IAAI;QAC/C,IAAIL,MAAM,CAACM,EAAE,IAAID,CAAC,CAACC,EAAE,KAAKN,MAAM,CAACM,EAAE,EAAE;UACjC,OAAO,IAAI;QACf;QACA,IAAIN,MAAM,CAACO,IAAI,IAAIF,CAAC,CAACE,IAAI,KAAKP,MAAM,CAACO,IAAI,EAAE;UACvC,OAAO,IAAI;QACf;QACA,OAAO,KAAK;MAChB,CAAC,CAAC;MAEF,IAAIL,UAAU,EAAE;QACZ,OAAOV,MAAM,CAACgB,EAAE,CAACN,UAAU,CAAC;MAChC;IACJ;;IAEA;IACA,MAAMO,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACC,GAAG,CAACC,MAAM,CAAC;;IAE/C;IACA,IAAIS,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACe,QAAQ,CAAC,CAACF,MAAM,CAACG,KAAK,CAAC,CAAC;IACvC;IAEA,OAAOH,MAAM;EACjB;EAEA,MAAMI,IAAIA,CAACb,MAAsB,EAAkD;IAC/E,OAAO,IAAI,CAACF,SAAS,CAACe,IAAI,CAACb,MAAM,CAAC;EACtC;EAEA,MAAMc,MAAMA,CAACC,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACgB,MAAM,CAACC,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACe,QAAQ,CAAC,CAACI,IAAI,CAAC,CAAC;IAC/B;IAEA,OAAON,MAAM;EACjB;EAEA,MAAMO,MAAMA,CAACD,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACkB,MAAM,CAACD,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACqB,WAAW,CAACC,IAAI,IAAI;QAC3B,IAAIA,IAAI,CAACZ,EAAE,KAAKS,IAAI,CAACT,EAAE,EAAE;UACrB,OAAOS,IAAI;QACf;QACA,OAAOG,IAAI;MACf,CAAC,CAAC;IACN;IAEA,OAAOT,MAAM;EACjB;EAEA,MAAMU,MAAMA,CAACJ,IAAU,EAAgD;IACnE,MAAMN,MAAM,GAAG,MAAM,IAAI,CAACX,SAAS,CAACqB,MAAM,CAACJ,IAAI,CAAC;;IAEhD;IACA,IAAIN,MAAM,CAACC,IAAI,CAAC,CAAC,EAAE;MACf,IAAI,CAACd,KAAK,CAACwB,WAAW,CAACF,IAAI,IAAIA,IAAI,CAACZ,EAAE,KAAKS,IAAI,CAACT,EAAE,CAAC;IACvD;IAEA,OAAOG,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMY,+BAA+B,GAAG5B,eAAe,CAAC6B,eAAe,CAAC;EAC3EC,SAAS,EAAE5B,mCAAmC;EAC9C6B,YAAY,EAAE;AAClB,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/shared/errors.d.ts

@@ -0,0 +1,39 @@
+import { BaseError } from "@webiny/feature/api";
+export declare class RoleStorageError extends BaseError {
+    readonly code: "ROLE_STORAGE_ERROR";
+    constructor(error: Error);
+}
+export declare class RoleNotFoundError extends BaseError {
+    readonly code: "ROLE_NOT_FOUND";
+    constructor();
+}
+type NotAuthorizedErrorData = {
+    message?: string;
+};
+export declare class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {
+    readonly code: "NOT_AUTHORIZED";
+    constructor(data?: NotAuthorizedErrorData);
+}
+type RoleExistsErrorData = {
+    slug: string;
+};
+export declare class RoleExistsError extends BaseError<RoleExistsErrorData> {
+    readonly code: "ROLE_EXISTS";
+    constructor(slug: string);
+}
+export declare class CannotUpdatePluginRolesError extends BaseError {
+    readonly code: "CANNOT_UPDATE_PLUGIN_ROLES";
+    constructor();
+}
+export declare class CannotDeletePluginRolesError extends BaseError {
+    readonly code: "CANNOT_DELETE_PLUGIN_ROLES";
+    constructor();
+}
+type RoleValidationErrorData = {
+    message: string;
+};
+export declare class RoleValidationError extends BaseError<RoleValidationErrorData> {
+    readonly code: "ROLE_VALIDATION_ERROR";
+    constructor(message: string);
+}
+export {};